Encryption Management
for Apple FileVault manages
Apple Filevault™ to encrypt the entire OS X
startup volume, which typically includes the home directory, abandoning the disk image
approach. Encryption Management for Apple FileVault manages encryption using Apple
FileVault
with the user's password as the encryption pass phrase. Encryption Management for
Apple
FileVault uses the AES-XTS mode of AES with 128 bit blocks and a 256 bit key to encrypt
the
disk, as recommended by NIST. Only unlock-enabled users can start or unlock the drive.
Once
unlocked, other users may also use the computer until it is shut down.
 |
Note
Mac OS local accounts or mobile accounts are able to initiate
encryption on Mac OS X Mountain Lion or above. Other Mac OS user account types will
be unable to initiate encryption.
|
